$ rpki-client -vvf repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft File: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft (raw, json) Hash identifier: UWd0wdHgxA80Sm+W8hx4bnrNHfsvsWMKt7RcrIBBuOo= Subject key identifier: FC:2B:D0:23:51:6A:6E:17:B0:27:47:0A:3C:93:8C:47:B9:F7:16:83 Authority key identifier: 3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 Certificate issuer: /CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Certificate serial: 7D386625E94E826FC2483B3C5B9BCB4AC7602D16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft Manifest number: 0214 Signing time: Tue 24 Mar 2026 23:12:07 +0000 Manifest this update: Tue 24 Mar 2026 23:07:07 +0000 Manifest next update: Sat 28 Mar 2026 08:44:07 +0000 Files and hashes: 1: 3130332e342e37362e302f32332d3234203d3e20313530323136.roa (hash: ncYGXRGoDNxvYIX3PcGqdrJLj1FxUvjJrqOvy1GAKxo=) 2: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl (hash: TKmkS+ylv1rpccwjGKUROd4bRjEVWseMbxKOEriiVhs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 08:44:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:38:66:25:e9:4e:82:6f:c2:48:3b:3c:5b:9b:cb:4a:c7:60:2d:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Validity Not Before: Mar 24 23:07:07 2026 GMT Not After : Mar 28 08:44:07 2026 GMT Subject: CN=FC2BD023516A6E17B027470A3C938C47B9F71683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:31:f1:d0:2b:3d:eb:ef:ba:c5:6f:57:9c:76: 39:4c:9d:dd:db:68:f6:e3:66:ea:11:75:6b:29:d5: 40:4c:f3:ae:26:8e:9d:7d:5a:07:19:ac:ed:7d:6c: ce:76:19:ff:38:fe:f5:fe:f4:0c:d1:da:4b:45:17: 0e:18:e1:3b:93:90:26:bd:7b:1a:6d:8e:fc:b6:ac: 89:e4:7a:73:bc:6f:50:ab:44:b0:e5:f3:85:7a:ff: b3:94:3b:be:eb:b9:2e:77:b1:18:ee:b1:07:b5:e6: 16:91:b1:b5:a3:7b:56:c3:c3:d0:58:41:c5:d0:ad: 52:9f:af:52:50:d9:50:d5:40:3f:88:bf:39:80:46: e4:83:34:a6:ac:6f:20:9b:ad:1d:71:e7:e1:26:bd: 48:49:88:3a:e6:e8:86:44:a3:07:49:38:40:21:c6: d9:cb:bc:48:f0:08:8b:ea:c7:17:1a:a9:93:09:b2: 70:c4:1c:0e:c9:d2:92:44:26:e6:18:da:70:58:ef: 7f:00:59:26:b1:3a:7f:32:be:7c:8d:f6:0d:b0:46: 6a:d0:c2:6a:a4:b4:2a:d0:9c:b5:cf:b1:56:3c:26: 14:65:f2:b6:3a:65:33:76:4e:7e:5e:23:c4:c3:8d: 36:a0:d8:19:b3:59:35:d2:2c:31:80:60:8f:8e:5b: 1b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:2B:D0:23:51:6A:6E:17:B0:27:47:0A:3C:93:8C:47:B9:F7:16:83 X509v3 Authority Key Identifier: keyid:3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:22:47:0e:34:c3:90:91:39:11:25:33:a3:c5:9a:58:b3:ea: cd:0f:0d:7c:b4:59:96:8f:85:ee:78:a7:07:7b:f2:ca:39:f5: 70:5b:c6:6f:db:d7:64:0a:4c:4a:59:ac:73:7b:db:41:63:23: f9:95:e7:35:a3:a5:ec:08:be:46:35:ff:7c:25:e4:be:50:7e: bf:a9:10:f3:85:40:90:df:f3:f4:a9:52:31:c7:b2:70:61:d6: ba:43:83:88:7d:67:8d:26:6a:15:11:fe:e8:ef:5c:67:f3:e8: ec:05:a6:ac:12:83:ed:26:d5:33:30:73:85:ff:0b:f1:e5:a4: a2:80:5c:69:24:3a:5d:79:03:18:f6:24:63:4c:3f:2c:23:ca: f4:78:b9:0d:d8:85:2f:20:23:12:ff:5b:bb:ba:af:3f:eb:3a: 10:f5:c6:0c:95:7a:ba:0e:e0:42:87:46:10:3e:3d:da:60:52: b1:c8:70:37:87:26:e6:df:6d:d8:19:13:a6:76:cf:2f:11:7b: 88:59:dc:e1:7d:cd:1d:4f:7c:c0:b7:1c:61:e6:86:1a:3e:1d: 36:4d:43:d5:3d:18:d2:b0:b1:7f:e0:61:53:5d:d0:af:05:5e: 35:2f:44:6b:1f:33:88:a4:f5:bd:c8:ad:c3:d7:43:d1:3c:fd: 9a:ab:07:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfThmJelOgm/CSDs8W5vLSsdgLRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRF QTgxNTZEMzAeFw0yNjAzMjQyMzA3MDdaFw0yNjAzMjgwODQ0MDdaMDMxMTAvBgNV BAMTKEZDMkJEMDIzNTE2QTZFMTdCMDI3NDcwQTNDOTM4QzQ3QjlGNzE2ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBMfHQKz3r77rFb1ecdjlMnd3b aPbjZuoRdWsp1UBM864mjp19WgcZrO19bM52Gf84/vX+9AzR2ktFFw4Y4TuTkCa9 exptjvy2rInkenO8b1CrRLDl84V6/7OUO77ruS53sRjusQe15haRsbWje1bDw9BY QcXQrVKfr1JQ2VDVQD+IvzmARuSDNKasbyCbrR1x5+EmvUhJiDrm6IZEowdJOEAh xtnLvEjwCIvqxxcaqZMJsnDEHA7J0pJEJuYY2nBY738AWSaxOn8yvnyN9g2wRmrQ wmqktCrQnLXPsVY8JhRl8rY6ZTN2Tn5eI8TDjTag2BmzWTXSLDGAYI+OWxunAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/CvQI1FqbhewJ0cKPJOMR7n3FoMwHwYDVR0j BBgwFoAUP7/pLVsiDps2s3vNMJHXVOqBVtMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Mjk0MDFkMC0yNmE3LTQ3ODctYjY4YS0xODJiMTUyYTk1MTMvMC8zRkJGRTkyRDVC MjIwRTlCMzZCMzdCQ0QzMDkxRDc1NEVBODE1NkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRFQTgx NTZEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI5NDAxZDAtMjZhNy00Nzg3LWI2 OGEtMTgyYjE1MmE5NTEzLzAvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3 NTRFQTgxNTZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwiRw40w5CRORElM6PFmliz6s0PDXy0WZaP he54pwd78so59XBbxm/b12QKTEpZrHN720FjI/mV5zWjpewIvkY1/3wl5L5Qfr+p EPOFQJDf8/SpUjHHsnBh1rpDg4h9Z40mahUR/ujvXGfz6OwFpqwSg+0m1TMwc4X/ C/HlpKKAXGkkOl15Axj2JGNMPywjyvR4uQ3YhS8gIxL/W7u6rz/rOhD1xgyVeroO 4EKHRhA+PdpgUrHIcDeHJubfbdgZE6Z2zy8Re4hZ3OF9zR1PfMC3HGHmhho+HTZN Q9U9GNKwsX/gYVNd0K8FXjUvRGsfM4ik9b3IrcPXQ9E8/ZqrB3U= -----END CERTIFICATE-----Generated at Thu Mar 26 18:30:17 2026 by rpki-client